add access key to forgotten docker pushes

Author: EmmaTintinger

.github/workflows/tests.yml

@@ -210,14 +210,14 @@ jobs:
         uses: docker/setup-buildx-action@v3
       - if: ${{ steps.pydep-precheck.outputs.do_generation == 'true' }}
         uses: docker/build-push-action@v6
-        secrets: |
-          github_token=${{ secrets.PERSONAL_ACCESS_TOKEN}}
         with:
           context: .
           file: ./Dockerfile
           tags: skymap_scanner:py-dep-this
           load: true
           build-args: INCLUDE_GCD=0  # for pip recording we don't need GCD files
+          secrets: |
+          github_token=${{ secrets.PERSONAL_ACCESS_TOKEN}}
       - if: ${{ steps.pydep-precheck.outputs.do_generation == 'true' }}
         uses: WIPACrepo/wipac-dev-py-dependencies-action@v3.4
 
@@ -236,8 +236,6 @@ jobs:
           fetch-depth: 0  # setuptools-scm needs to access git tags
       - uses: docker/setup-buildx-action@v3
       - uses: docker/build-push-action@v6
-        secrets: |
-            github_token=${{ secrets.PERSONAL_ACCESS_TOKEN}}
         with:
           context: .
           file: ./Dockerfile
@@ -278,15 +276,14 @@ jobs:
           fetch-depth: 0  # setuptools-scm needs to access git tags
       - uses: docker/setup-buildx-action@v3
       - uses: docker/build-push-action@v6
-        secrets: |
-            github_token=${{ secrets.PERSONAL_ACCESS_TOKEN}}
         with:
           context: .
           file: ./Dockerfile
           tags: ${{ env._SCANNER_IMAGE_DOCKER }}
           load: true
           build-args: INCLUDE_GCD=0  # for dummy tests we don't need GCD files
-
+          secrets: |
+            github_token=${{ secrets.PERSONAL_ACCESS_TOKEN}}
       - if: ${{ matrix.container_platform == 'apptainer' }}
         name: "apptainer only: install apptainer"
         run: |
@@ -514,14 +511,13 @@ jobs:
           fetch-depth: 0  # setuptools-scm needs to access git tags
       - uses: docker/setup-buildx-action@v3
       - uses: docker/build-push-action@v6
-        secrets: |
-            github_token=${{ secrets.PERSONAL_ACCESS_TOKEN}}
         with:
           context: .
           file: ./Dockerfile
           tags: ${{ env._SCANNER_IMAGE_DOCKER }}
           load: true
-
+          secrets: |
+            github_token=${{ secrets.PERSONAL_ACCESS_TOKEN}}
       - name: run
         timeout-minutes: 55  # on average max~=35min
         run: |
@@ -615,14 +611,13 @@ jobs:
           fetch-depth: 0  # setuptools-scm needs to access git tags
       - uses: docker/setup-buildx-action@v3
       - uses: docker/build-push-action@v6
-        secrets: |
-            github_token=${{ secrets.PERSONAL_ACCESS_TOKEN}}
         with:
           context: .
           file: ./Dockerfile
           tags: ${{ env._SCANNER_IMAGE_DOCKER }}
           load: true
-
+          secrets: |
+            github_token=${{ secrets.PERSONAL_ACCESS_TOKEN}}
       - name: run
         run: |
           set -euo pipefail; echo "now: $(date -u +"%Y-%m-%dT%H:%M:%S.%3N")"
@@ -670,13 +665,13 @@ jobs:
           fetch-depth: 0  # setuptools-scm needs to access git tags
       - uses: docker/setup-buildx-action@v3
       - uses: docker/build-push-action@v6
-        secrets: |
-            github_token=${{ secrets.PERSONAL_ACCESS_TOKEN}}
         with:
           context: .
           file: ./Dockerfile
           tags: ${{ env._SCANNER_IMAGE_DOCKER }}
           load: true
+          secrets: |
+            github_token=${{ secrets.PERSONAL_ACCESS_TOKEN}}
 
       - name: run
         timeout-minutes: 10  # on average max~=5min